Re: Sequrity without HTTPS?
| From: | Manuel Lemos | Date: | Thu, 18 Nov 2004 13:27:18 +0000 |
| Subject: | Re: Sequrity without HTTPS? | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-202415@lists.php.net to get a copy of this message | ||
On 11/18/2004 10:23 AM, Peter Lauri wrote:
If you use the Autority HTTP that pops up a login window by default, is that safe against "listeners"?It depends on the authentication method. Basic authentication method passes passwords as base64 encoded plain text. Digest and even NTLM are safer because the actual passwords are not sent without encryption. -- Regards, Manuel Lemos PHP Classes - Free ready to use OOP components written in PHP http://www.phpclasses.org/ PHP Reviews - Reviews of PHP books and other products http://www.phpclasses.org/reviews/ Metastorage - Data object relational mapping layer generator http://www.meta-language.net/metastorage.html